UTM Attribution for WooCommerce

UTM Attribution for WooCommerce records how each visitor reached your store and credits their WooCommerce orders to that visit, so you can see visits, conversions and revenue per campaign right in your WordPress admin. Everything is stored in two tables in your own database. No external analytics account, tracking script or CDN is involved.

How visits are recorded

• UTM-tagged links — utm_source, utm_medium, utm_campaign, utm_term and utm_content are saved whenever a visitor lands on a tagged URL.
• Untagged traffic — Visitors without UTM tags are classified from the referrer: organic (Google, Bing, Yahoo, DuckDuckGo, Baidu, Yandex), social (Facebook, X/Twitter, Instagram, LinkedIn, Pinterest, Reddit, Telegram), referral (any other site), or direct.
• Noise filtered out — Bots, crawlers, uptime monitors, HTTP tools, shop staff, sitemaps, /.well-known/ files, 404 pages, feeds, AJAX and non-GET requests don’t create visits. Repeat requests from the same browser and source without cookies within 30 minutes count once, and reloading the same tagged link within 30 minutes doesn’t count twice.
• Click deduplication — An optional utm_site_id parameter lets you give each link click a unique ID so it is recorded only once.

How orders are attributed

• The visit is remembered in a signed, HttpOnly cookie (30 days by default). A new UTM click replaces it, so the most recent campaign gets the credit (last-touch).
• At checkout — classic or block checkout — the visit is saved on the order. When the order later reaches processing or completed, the conversion is recorded, even if that happens through a payment webhook, an admin action or cron.
• Refunds and cancellations are kept in sync: revenue is net of refunds, and cancelled, refunded or failed orders drop out of the reports.
• Optional user stitching can credit logged-in customers’ orders to their most recent visit within the cookie lifetime.

Reports

• Dashboard — Total visits, conversions, conversion rate and revenue, a visits-and-conversions chart, and a top campaigns table.
• Date ranges — Today, Last 7 / 30 / 90 days, This Year, or a custom range, all in your site’s timezone. Visits are counted by visit date, and conversions and revenue by order date.
• Visits and Conversions lists — Paginated tables of every recorded visit and attributed order, with links to the order.
• CSV export — Visits, conversions and top campaigns, with spreadsheet formula injection blocked.
• Revenue totals include orders in the store’s currency only.

Privacy

• IP addresses are never stored. A salted SHA-256 hash is stored instead, or nothing at all if you turn hashing off.
• Landing URLs keep only the page path and UTM parameters. Other query values, such as order keys or emails, are dropped.
• Visit data is included in the WordPress Export Personal Data and Erase Personal Data tools.
• The IP hash, user agent, referrer and user ID are removed from visits older than 365 days. Campaign totals are kept. The retention period is adjustable.

Settings

UTM Attribution → Settings lets you turn each traffic filter on or off, add your own user agents, URL paths and internal domains to ignore, and set the attribution window, user stitching, IP hashing and personal data retention.

Developer friendly

Filters for bot and path patterns, excluded users, internal domains, the cookie lifetime, which order statuses count as conversions, the user capability, IP hashing, user stitching, capture skipping and data retention, plus actions when the plugin loads and when a conversion is recorded. Compatible with WooCommerce High-Performance Order Storage (HPOS).